CYBER SECURITY POLICY
Cybercrime and fraud are serious threats and constant vigilance is key. While Merriwether Investments
Inc. plays an important role in helping protect your assets, you can also take action to protect yourself
and help secure your information. This checklist summarizes some common cyber fraud tactics, along
with tips and best practices. Many of these suggestions may be things you are doing now, while others
may be new practices for you. This policy also covers actions to take if you suspect that your personal
information has been compromised. If you have questions, please contact us at
info@investmerriwether.com.
Cyber criminals exploit our increased reliance to technology. Methods used to compromise a victim’s
identity or login credentials – such as malware, phishing, and social engineering can be sophisticated
and very difficult to spot. A fraudster’s goal is to obtain information to access your account and
investment assets or sell your information. Fortunately, criminals often take the path of least resistance.
Following best practices and applying caution when sharing information or executing transactions can
make a big difference.
WHAT YOU CAN DO
• Never share sensitive information or conduct business via email, as accounts are often
compromised.
• Beware of phishing and malicious links. Urgent-sounding, legitimate-looking emails are intended
to tempt you to accidentally disclose personal information or install malware.
• Be aware of suspicious phone calls, emails, and texts asking you to disclose personal information
or send money. If you suspect a suspicious call from us, hang up and call us back using a known
phone number from one of our advisors.
• Be cautious when opening links and/or e-mail attachments from sources that are unknown. A
best practice is to enter the web address in your browser.
• Check account statements and e-mail accounts regularly for suspicious activity.
• Never enter confidential information in public areas. Be cautious and assume someone may be
watching.
EXERCISE CAUTION WHEN MOVING MONEY
• Review and verbally confirm all disbursement request details thoroughly before providing your
approval, especially when sending funds to another country. Never trust wire instructions
received via email.
ADHERE TO STRONG PASSWORD PRINCIPLES
• Don’t use personal information as part of your login ID or password and don’t share login
credentials.
• Create a unique, complex password for each website. Change it every six months. Consider
using a password manager to simplify this process.
MAINTAIN UPDATED TECHNOLOGY
• Keep your web browser, operating system, antivirus, and anti-spyware updated, and activate
the firewall.
• Do not use free/found USB devices. They may be infected with malware.
• Check security settings on your applications and web browser. Make sure they’re strong.• Turn off Bluetooth when it’s not needed.
• Dispose of old hardware safely by performing a factory reset or removing and destroying all
storage data devices.
USE CAUTION ON WEBSITES AND SOCIAL MEDIA
• Do not visit websites you don’t know, (e.g., advertised on pop-up ads and banners).
• Log out completely to terminate access when exiting all websites.
• Don’t use public computers or free Wi-Fi. Use a personal Wi-Fi hotspot or a Virtual Private
Network (VPN).
• Hover over questionable links to reveal the URL before clicking. Secure websites start with
“https,” not “http.”
• Be cautious when accepting “friend” requests on social media, liking posts, or following links.
• Limit sharing information on social media sites. Assume fraudsters can see everything, even if
you have safeguards.
• Consider what you’re disclosing before sharing or posting your resume or any personal
information.
WE CAN WORK TOGETHER TO PROTECT YOUR INFORMATION AND ASSETS
Here are some safe practices for communicating with our firm:
• Keep us informed regarding changes to your personal information.
• Expect us to call you to confirm email requests to move money, trade, or change account
information.
• Establish a numeric pin number with our firm to confirm your identity or request an online video
meeting with our team.
WHAT TO DO IF YOU SUSPECT A BREACH
Call our office at (949) 416-5343. We will contact Charles Schwab so that they can watch for suspicious
activity, and we will collaborate with you on other steps to take.
LEARN MORE
You can visit these sites for more information and best practices:
• StaySafeOnline.org: Review the STOP. THINK. CONNECT™ cybersecurity educational campaign.
• OnGuardOnline.gov: Focused on online security for kids, it includes a blog on current cyber
trends.
• FDIC Consumer Assistance & Information,
https://www.fdic.gov/consumers/assistance/index.html
• FBI Scams and Safety provides additional tips, https://www.fbi.gov/scams-and-safety.
